Skip to content
OpenAdvisories

Package · npm

ebay-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.3
    CVE-2026-27203

    eBay API MCP Server Affected by Environment Variable Injection

    eBay API MCP Server is an open source local MCP server providing AI assistants with comprehensive access to eBay's Sell APIs. All versions are vulnerable to Environment Variable Injection through the updateEnvFile function. The ebay_set_user_tokens tool allow…

    YosefHayim ebay-mcp ebay-mcp npm